Amendment filed June 1 9, 2008 

Responding to Office Action mailed February 21 , 2008 

App. Serial No. 10/679,391 

REMARKS 

L Status of Claims 

The applicants have carefully considered the Office Action dated February 21, 2008, and the 
references cited therein. In the Office Action, claims 1-5 and 7-10 were rejected under 35 
U.S.C. § 103(a) as being unpatentable over 3 rd Generation Partnership Project, "Document 2: 
KASUMI Specification" Release 4, 2001-08-28 (DKS), and further in view of U.S. Patent 
No. 6,324,288 to Hoffman ( Hoffman ) and in view of "Parallel stream cipher for secure high- 
speed communications", 2001-07-09, by Hoonjae Lee (Lee) 

II. Formalities 

In the Office Action, the Examiner failed to acknowledge acceptance of the formal 
drawings. The applicants respectfully request that the Examiner acknowledge acceptance of 
the formal drawings. 

in. Rejections under 35 U.S.C. § 103(a) 

With respect to independent claims 1 and 8, the applicants disagree with the 
Examiner's allegations. In particular, there is nothing in the alleged combination of DKS 
and Lee that discloses or teaches a method for performing a first-round of encryption by 
encrypting the received first and second sub-bit streams with predetermined first encryption 
codes an odd number of times, and outputting the second ciphertext bit stream encrypted 
again with a predetermined time delay right after the first ciphertext bit streams of length n 
are output; generating a first operated ciphertext bit stream by performing a logical exclusive- 
OR operation on the first ciphertext bit stream and the third sub-bit stream at the same time of 
performing encryption of the second ciphertext bit stream; generating a second operated 
ciphertext bit stream by performing a logical exclusive-OR operation on the second ciphertext 
bit stream and the fourth sub-bit stream; and performing a second-round of encryption by 
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encrypting the received first operated ciphertext bit stream and the second operated 
ciphertext, comprising the predetermined time delay, with predetermined second encryption 
codes an odd number of times, and concurrently outputting the third and fourth ciphertext bit 
streams of length n after encryption the first operated ciphertext bit stream again with 
predetermined second encryption codes. 

To exemplify the recitations of independent claims 1 and 8, the applicants direct the 
Examiner's attention to FIG. 5 of the present patent application. In FIG. 5, a first-round of 
encryption (501) is performed by encrypting the received first and second sub-bit streams (L 0 , 
Ro, respectively) with predetermined first encryption codes (KO^i, KOi )2 , respectively) an 
odd number of times, and the second ciphertext bit stream (R^d), which is encrypted again 
(Kli j2 ), is output with a predetermined time delay (D 7 ) right after the first ciphertext bit 
stream (R 3 ) of length n are output. 

DKS discloses a first round of encryption where the integer i constitutes the round zth 
round function of KASUMI. A 64-bit input / is divided into two 32-bit strings Lo and Ro. 
The function FL1 receives the 32-bit Lo and a 32-bit subkey KL|. The subkey is split into two 
16-bit subkeys, KLi ? i and KLi^, and the input data/ is split into two 16-bit halves, L and R 
where I=L\\R. The 32-bit output value is (L ]\R *). See Figure 4 and sections 3.2 and 4.2 on 
page 1 1 . Function FOl receives the output of FL1, which comprises a 32-bit string Lo and 
two sets of subkeys, a 48-bit subkey KOi and a 48-bit subkey KI|. The 32-bit data input is 
split into two halves, Lo and Ro, where / = Lo\\Ro- The 48-bit subkeys are subdivided into three 
16-bit subkeys where KOi=KO u ||KOiJKOj j3 and KIj=KIij||KIiJKIi, 3 . The 32-bit value 
(L3WR3) is returned. See Figures 1 and 2 and section 4.3. 

Further, there is nothing in DKS that discloses or teaches that the second sub-bit 
stream Ro is encrypted with subkeys KLi, KOi, KI, in the first round of encryption (FL1, 
FOl). The second sub-bit stream Ro of DKS is input to an exclusive-OR operation in the first 
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round. There is also nothing in DKS that discloses or teaches a second ciphertext bit stream 
because Ro is not initially encrypted with subkeys and Ro is not encrypted again with the 
subkeys. Moreover, there is nothing in DKS that discloses or teaches a second ciphertext bit 
stream being output with a predetermined time delay. Accordingly, DKS fails to disclose 
or teach a method for performing a first-round of encryption by encrypting the received first 
and second sub-bit streams with predetermined first encryption codes an odd number of 
times, and outputting the second ciphertext bit stream, which is encrypted again, with a 
predetermined time delay right after the first ciphertext bit streams of length n are output. 

Also in FIG. 5 of the present application, a first operated ciphertext bit stream (R4) is 
generated by performing a logical exclusive-OR operation on the first ciphertext bit stream 
(R 3 ) and the third sub-bit stream (R 0 ) at the same time of performing encryption of the 
second ciphertext bit stream (L 5 ). 

DKS discloses in the first round, performing a logical exclusive-OR operation on the 
second 32-bit string Ro and the output of FOl, which comprises a 32-bit value There 
is nothing in DKS that discloses or teaches that a third sub-bit stream is used to perform a 
logical exclusive-OR operation. Instead, the second 32-bit string Ro is used to perform a 
logical exclusive-OR operation with the output of FOl . Accordingly, DKS fails to disclose 
or teach a method for generating a first operated ciphertext bit stream. 

Further in FIG. 5 of the present application, a second operating ciphertext bit stream 
(L6) is generated by performing a logical exclusive-OR operation on the second ciphertext bit 
stream (L5) and the fourth sub-bit stream (Lo>)- 

DKS discloses in the first round, performing a logical exclusive-OR operation on the 
output of FOl, which comprises a 32-bit value There is nothing in DKS that 

discloses or teaches a second ciphertext bit stream since the second ciphertext bit stream of 
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the present application is output with a predetermined time delay. Further, there is also 
nothing in DKS that discloses or teaches a time delay. Accordingly, DKS fails to disclose or 
teach a method for generating a second operated ciphertext bit stream. 

Also in FIG. 5 of the present application, a second-round of encryption (502) is 
performed by encrypting the received first operated ciphertext bit steam (R4) and the second 
operated ciphertext bit stream (L 6 ), comprising the predetermined time delay, with 
predetermined second encryption codes (KC^, K02,3, respectively) an odd number of times, 
and concurrently outputting the third and fourth ciphertext bit streams of length n (L 8 , Rg 5 
respectively) after encrypting the first operated ciphertext bit stream again with predetermined 
second encryption codes. 

DKS discloses a second round of encryption (F02, FL2) in which function F02 
receives the output of the exclusive-OR operation, in the first round, performed on Rn and the 
output of the function FOl . The function F02 also receives two sets of subkeys, a 48-bit 
subkey KO2 and a 48-bit subkey KI2. The function FL2 receives the output of the function 
F02 and a 32-bit subkey KL2. 

That is, DKS does not disclose or teach a first operated ciphertext bit stream and a 
second operated ciphertext bit stream, as discussed above. Moreover, there is nothing in 
DKS that discloses encrypting a first operated ciphertext bit stream and a second operated 
ciphertext bit stream comprising a time delay. DKS discloses encrypting the output of the 
exclusive-OR operation, in the first round, performed on Ro and the output of the function 
FOl. Accordingly, DKS fails to disclose or teach performing a second-round of encryption by 
encrypting the received first operated ciphertext bit steam and the second operated ciphertext, 
comprising the predetermined time delay, with predetermined second encryption codes an 
odd number of times, and concurrently outputting the third and fourth ciphertext bit streams 
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of length n after encrypting the first operated ciphertext bit steam again with predetermined 
second encryption codes. 

In rejecting claim 1, the Examiner admits that DKS does not explicitly disclose 
performing encryption of first and second ciphertext bit stream at the same time. To cure the 
deficiencies of DKS, the Examiner alleges that Lee discloses performing encryption of first 
and second ciphertext bit streams at the same time, by referencing pages 262-263 and section 
2.3 of Lee, and asserting that Lee teaches this concept by identifying nonlinear functions to 
run those nonlinear function combined in parallel. According to the Examiner, it would have 
been obvious to one of ordinary skill in the art at the time of the invention was made to 
modify the teachings of DKS by combining two nonlinear function (i.e., two FO units) as 
taught by Lee in order to optimize speed or faster processing. 

The applicants respectfully disagree and submit that Lee does not cure the 
deficiencies of DKS . Lee discloses a parallel stream cipher that generates independent 
sequences from nonlinear combine functions via N LFSRs. Each (m) sequence enciphers 
from a plaintext block to a ciphertext block in parallel, which makes the proposed cipher m- 
times faster than a conventional stream cipher. 

There is nothing in Lee that discloses or teaches a first operated ciphertext bit stream 
and second operated ciphertext bit stream, which comprises a time delay. In the present 
application, a first operated ciphertext bit stream is generated by performing a logical 
exclusive-OR operation on the first ciphertext bit stream and the third sub-bit stream at the 
same time of performing encryption of the second ciphertext bit stream, and a second 
operated ciphertext bit stream is generated by performing a logical exclusive-OR operation on 
the second ciphertext bit stream and the fourth sub-bit stream. Moreover there is nothing in 
Lee that discloses or teaches a third sub-bit stream and a fourth sub-bit stream. The 
encryption process of Lee is performed on m-bits shifted within a clock, which the m 
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feedback paths are independently XORed based on each combination of feedback taps. See 
section 2.2 on page 260. There is nothing in Lee that discloses or teaches a first ciphertext bit 
stream and a third sub-bit stream is XORed, and a second ciphertext bit stream and a fourth 
sub-bit stream is XORed. 

Therefore, the Examiner has not provided any motivation for combining the 
references. The Examiner asserts that it would have been obvious to modify the teachings of 
DKS by combining two nonlinear functions (i.e., two FO units) as taught by Lee. The 
functions f\,fi> . . .,/m are w-parallel nonlinear combine functions as a generalized model, 
which use m-bit memories and PS-LFSRs. The function FO of DKS uses a 48-bit subkey 
KOi and a 48-bit subkey Kit to encrypt data input /. Accordingly, the functions f u f 2 , . . .,/ m of 
Lee are not analogous to the function FO of DKS . Accordingly the combination of Lee and 
DKS does not result in the recitations of the claims. Likewise, Campbell does not supply the 
at least above-noted deficiencies of DKS and Lee . 

In view of the above, claims 1 and 8 would not have been obvious from any 
reasonable combination of DKS and Lee at least for reasons noted above. Therefore, the 
rejections of claims 1 and 8 and all dependents therefrom are in condition for allowance and 
the notice to that effect is respectfully requested. 

IV. Conclusion 

The applicants submit that the above arguments are fully responsive to the Office 
Action dated February 21, 2008 and respectfully request the asserted grounds of rejections be 
withdrawn based on such arguments. In view of the above, the applicants believe that all 
pending claims are in condition for allowance and notice to that effect is respectfully 
requested. Should the Examiner have any questions, the Examiner is encouraged to contact 
the undersigned at the telephone number indicated below. 
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Respectfully submitted, 




Attorney of Record 
Reg. No. 58,582 

Roylance, Abrams, Berdo & Goodman, L.L.P. 
1300 19 th Street, N.W., Suite 600 
Washington, D.C. 20036-2680 
(202) 659-9076 

Dated: June 19, 2008 
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